Tinyhumansai vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tinyhumansai products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-55743 Critical · 9.6 CWE-78 Jun 17, 2026

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.